Koozali.org: home of the SME Server

Site-to-Site VPN

Jeremy Van Veelen

Site-to-Site VPN
« on: March 08, 2001, 11:29:07 PM »
Does or can E-smith server support semi-permanent site-to-site VPN tunnels? (even if it is just PPTP)

If so, where can I find the documentation to set this up?

Thanks in advance
Jeremy
Systems Adminstrator
James Evans and Associates

Jeb Campbell

Re: Site-to-Site VPN
« Reply #1 on: March 09, 2001, 08:19:44 AM »
I have a freeswan rpm for the 4.1.x series at http://jebc.dyndns.org
install it, and get the script to make the config files.

If you need more help post and we can go off this board.

You can do multiple site to site with compression with that package.

Gerald

Re: Site-to-Site VPN
« Reply #2 on: March 10, 2001, 12:11:45 AM »
If you go off the board with this please cc me I am very interested in the result.

matoa

Re: Site-to-Site VPN
« Reply #3 on: March 11, 2001, 02:55:21 AM »
Me too, please keep in touch.

Mathieu
;o)

Gerald

Re: Site-to-Site VPN
« Reply #4 on: March 11, 2001, 04:05:49 AM »
Since we all seem to be working on the same task I thought I might mention what I have discovered thus far. I am working with VNC. I am able to use ssh to go from one W2Kp workstation through the e-smith host and then to the other e-smith host and then pass through to the remote W2Kp workstation by  addressing its non-routeable IP.  I do this by:
 ssh -g -L 5901:windows2:5900 linux2
once this is done the remote e-smith server asks for a password and the connection is complete. I then start the VNC viewer on the remote workstation and nothing happens. The documentation mentions also enabling port 5800. However, I haven't figured out how or what it does. I would assume, and that usually gets me in trouble, that port 5800 is used for the screen echos of the remote workstation. If you have any ideas or observations let me know. If you haven't already looked at the VND site it is located at:
http://www.uk.research.att.com/vnc/index.html

Jerry

Jeb Campbell

Re: Site-to-Site VPN
« Reply #5 on: March 11, 2001, 06:22:54 AM »
E-mail me at the above address and let me know what version of e-smith you are running, and I'll get you up.  If it's the 4.1.x e-smith series, the new rpm is at www.jebc.dyndns.org.  Then email with questions on the script that sets up the vpn.  Actually very easy once you do it one, and you get compression between the networks.  Have fun.

Jeb CampbellJeremy Van Veelen wrote: